Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: 0yYBk65fa/u8uMpthsQSTpRPihAEWQXngNNGmfPejns=
Subject key identifier: 05:63:AB:06:68:24:7B:50:C6:AA:5F:F6:38:99:25:82:FD:71:B2:CE
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 019FFA91EA176D4DA191F64F9BB8B31B70C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 19FF
Signing time: Thu 13 Aug 2026 10:01:34 +0000
Manifest this update: Thu 13 Aug 2026 10:01:34 +0000
Manifest next update: Fri 14 Aug 2026 10:01:34 +0000
Files and hashes: 1: DsE2Pr9IN7rJIvUK10gbOEMiDww.roa (hash: 3j8bdASeJ0zHcaqofBlBljdvHSO6WNTIHFBrgkx01dA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: f72BvBvejZqHe8Zz6udOTJg7SVTHiYo3Sx6J1yGr1Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:91:ea:17:6d:4d:a1:91:f6:4f:9b:b8:b3:1b:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Aug 13 10:01:34 2026 GMT
Not After : Aug 14 10:01:34 2026 GMT
Subject: CN=0563ab0668247b50c6aa5ff638992582fd71b2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:02:5e:40:31:15:e0:0c:61:46:e2:46:a4:
65:69:cf:40:2d:09:01:bc:bb:78:fc:72:e2:52:0b:
b6:a1:69:c2:a8:64:27:f4:72:21:6f:51:ee:28:e7:
27:ee:cb:20:93:40:d4:5d:67:d9:b7:b0:08:4f:28:
de:29:d7:5c:ca:d9:a1:07:0a:13:c6:be:a8:38:0f:
21:56:2b:d8:dd:50:14:91:7a:8d:ac:1d:bc:a1:f3:
86:9e:b5:ff:bb:5f:2d:c0:14:30:44:7c:29:f6:41:
04:c0:bd:4c:6c:37:35:bf:3c:60:35:17:6a:4e:ea:
0d:04:cd:a6:fb:78:31:bb:b4:ea:6f:73:16:5a:04:
9a:f9:4d:a4:d6:c4:c7:1a:53:49:96:34:14:e1:f5:
10:bb:f7:7d:20:15:e6:69:6d:24:25:cd:ad:06:a1:
f2:6e:8d:2f:77:1a:0c:a4:f9:38:d0:84:fa:2a:66:
7d:5b:39:46:9e:3f:cb:50:65:0d:5d:9b:bd:41:50:
97:6d:eb:3d:d8:4a:e0:aa:1b:b3:9b:ba:f6:f4:69:
b9:7c:6d:19:81:27:e6:ca:ef:1a:be:ea:0c:34:be:
02:7f:3e:64:a5:72:fe:36:a6:b9:f8:0c:dd:b4:3d:
7f:a8:d4:b1:a1:7a:5a:7a:61:97:1d:35:23:d4:6d:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:AB:06:68:24:7B:50:C6:AA:5F:F6:38:99:25:82:FD:71:B2:CE
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:07:b0:9f:5e:d4:c9:11:3b:3a:47:8f:6a:05:6f:f8:ab:2d:
bf:e1:f5:18:da:83:34:9f:5d:6b:9e:8a:8b:8e:ae:aa:cd:08:
bd:54:2f:c6:f6:ef:ba:fe:e9:e1:8b:61:41:64:d9:3e:93:fb:
23:8e:a5:7d:5a:d6:50:ec:64:2c:a6:f2:18:87:0d:f8:04:64:
8c:8f:54:80:4f:da:c1:ec:8d:f8:40:70:94:c4:94:c6:a9:ed:
e6:a3:ea:12:1a:b0:7e:fd:09:e8:a4:64:cc:ac:84:eb:a2:b5:
c7:94:9b:47:66:c4:99:5e:5a:07:ff:d8:1b:62:5c:37:99:36:
00:bc:c8:59:6c:b7:b3:47:05:af:3d:c5:8b:7b:b6:40:21:26:
3a:57:d0:77:b0:70:cb:66:66:cd:cf:74:57:20:02:b9:bc:06:
5a:ba:0f:a4:9c:4e:ff:bf:e1:02:ba:94:42:2a:5b:3f:15:35:
d1:1d:97:bf:b3:fc:8d:ae:b4:bd:d0:d2:ce:a1:3b:cb:42:cd:
ac:63:4d:aa:f8:4e:b3:8b:ec:2d:55:b5:17:40:9c:77:a6:97:
b1:bf:f3:a0:7f:64:69:86:fd:c8:d8:04:b0:1c:0e:37:7e:76:
31:8e:c1:4a:63:98:b8:00:7d:07:72:0a:0c:71:8b:60:c5:d2:
26:3c:d2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6keoXbU2hkfZPm7izG3DDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWViMjgwZDE3MjI4NDZhNDQxMjRjNGM2MmQwMDU5ZjYx
YWYyNDIwHhcNMjYwODEzMTAwMTM0WhcNMjYwODE0MTAwMTM0WjAzMTEwLwYDVQQD
EygwNTYzYWIwNjY4MjQ3YjUwYzZhYTVmZjYzODk5MjU4MmZkNzFiMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPwCXkAxFeAMYUbiRqRlac9ALQkB
vLt4/HLiUgu2oWnCqGQn9HIhb1HuKOcn7ssgk0DUXWfZt7AITyjeKddcytmhBwoT
xr6oOA8hVivY3VAUkXqNrB28ofOGnrX/u18twBQwRHwp9kEEwL1MbDc1vzxgNRdq
TuoNBM2m+3gxu7Tqb3MWWgSa+U2k1sTHGlNJljQU4fUQu/d9IBXmaW0kJc2tBqHy
bo0vdxoMpPk40IT6KmZ9WzlGnj/LUGUNXZu9QVCXbes92Ergqhuzm7r29Gm5fG0Z
gSfmyu8avuoMNL4Cfz5kpXL+Nqa5+AzdtD1/qNSxoXpaemGXHTUj1G3QpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVjqwZoJHtQxqpf9jiZJYL9cbLOMB8GA1UdIwQY
MBaAFK4esoDRcihGpEEkxMYtAFn2GvJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUt
Nzc5M2I5ZWZiMWJkLzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUtNzc5M2I5ZWZiMWJk
LzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgewn17U
yRE7OkePagVv+Kstv+H1GNqDNJ9da56Ki46uqs0IvVQvxvbvuv7p4YthQWTZPpP7
I46lfVrWUOxkLKbyGIcN+ARkjI9UgE/aweyN+EBwlMSUxqnt5qPqEhqwfv0J6KRk
zKyE66K1x5SbR2bEmV5aB//YG2JcN5k2ALzIWWy3s0cFrz3Fi3u2QCEmOlfQd7Bw
y2Zmzc90VyACubwGWroPpJxO/7/hArqUQipbPxU10R2Xv7P8ja60vdDSzqE7y0LN
rGNNqvhOs4vsLVW1F0Ccd6aXsb/zoH9kaYb9yNgEsBwON352MY7BSmOYuAB9B3IK
DHGLYMXSJjzS8g==
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:39:17 2026 by rpki-client